TY - RPRT TI - PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection AU - Yuhang Wang PY - 2026 UR - https://arxiv.org/abs/2607.16199 ID - 2607.16199 ER -